Modify signup and signin endpoints. TODO: make use of api token.